Route Origin Authorization

$ rpki-client -vvf rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa
File:                     32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa (raw, json)
Hash identifier:          8Dk/a6x7RQFl03oxvfIkoM0BvKEGK8tsW3OjYGrKCrs=
Subject key identifier:   8A:8E:99:68:2D:C8:8B:F1:B9:2E:78:AE:F7:7F:A5:21:2F:EB:9C:28
Certificate issuer:       /CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
Certificate serial:       1B2355D1FC602AFBA891D7D9EFBC15792E3572BC
Authority key identifier: 0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
Subject info access:      rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa
Signing time:             Tue 28 May 2024 23:14:57 +0000
ROA not before:           Tue 28 May 2024 23:09:57 +0000
ROA not after:            Tue 27 May 2025 23:14:57 +0000
asID:                     138995
IP address blocks:        23.132.185.0/24 maxlen: 24

Validation:               OK
Signature path:           rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl
                          rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/f60c9f32-a87c-4339-a2f3-6299a3b02e29.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/5e4a23ea-e80a-403e-b08c-2171da2157d3.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3.cer
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.crl
                          rsync://rpki.arin.net/repository/arin-rpki-ta/arin-rpki-ta.mft
                          rsync://rpki.arin.net/repository/arin-rpki-ta.cer
Signature path expires:   Fri 22 Nov 2024 21:00:00 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:23:55:d1:fc:60:2a:fb:a8:91:d7:d9:ef:bc:15:79:2e:35:72:bc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96
        Validity
            Not Before: May 28 23:09:57 2024 GMT
            Not After : May 27 23:14:57 2025 GMT
        Subject: CN=8A8E99682DC88BF1B92E78AEF77FA5212FEB9C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:37:d4:4e:b8:1b:d9:18:8a:98:11:aa:24:fd:
                    e5:a5:93:44:8c:ea:10:5d:f8:a3:38:98:53:63:90:
                    f4:c9:4d:cd:24:a4:33:8f:d6:42:da:e3:9d:ee:32:
                    3c:20:17:74:fa:d1:45:67:57:af:c9:ad:74:ba:5d:
                    39:91:76:88:f3:b5:d9:ea:8d:e6:51:e2:6d:e4:6a:
                    61:05:97:f7:d3:e3:20:a1:ba:96:e2:7c:ae:cf:3b:
                    25:bc:6e:2f:9e:13:bb:13:ce:ba:04:9f:6b:6f:82:
                    35:54:a5:3d:a3:2a:ea:bb:07:39:9b:06:b3:80:93:
                    fc:b0:80:08:c3:fd:2a:ae:93:57:32:cf:ee:2c:0b:
                    87:d7:67:b3:d4:6a:d9:de:a6:16:72:ae:62:65:bb:
                    05:17:d2:dc:98:41:3e:3f:a3:d1:cf:5d:f4:82:9e:
                    0a:e8:48:b9:ef:17:08:63:fe:39:1a:35:75:c6:b1:
                    90:92:bb:89:9d:ca:cc:b8:e9:3a:4e:be:40:f6:a6:
                    a5:c1:0a:e9:c8:dc:0e:5c:6d:66:10:05:3e:52:fc:
                    cc:9e:17:01:1c:db:6d:f1:3b:49:b3:b3:a6:30:1d:
                    4c:b3:97:b1:85:fc:47:eb:32:30:44:4e:29:36:dd:
                    49:d6:14:4e:39:cf:fe:94:df:31:da:36:c3:2f:6b:
                    2a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:8E:99:68:2D:C8:8B:F1:B9:2E:78:AE:F7:7F:A5:21:2F:EB:9C:28
            X509v3 Authority Key Identifier:
                keyid:0F:03:31:2E:E5:9E:3D:E8:27:35:F6:6B:54:94:15:DE:44:64:78:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/0F03312EE59E3DE82735F66B549415DE44647875.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/a01e997c-b89e-47c2-8d79-d31e58bc3ca4/eecf847d7a3e57959bebd697a7e067a75e18bb6298b1d3bf96.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-rps.arin.net/repository/8a848adf850d063e0185755c91be3f9d/1/32332e3133322e3138352e302f32342d3234203d3e20313338393935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  23.132.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1d:91:d5:df:b9:e1:09:eb:4d:c5:a7:4b:1c:34:de:35:0d:29:
         c7:d6:25:78:af:f4:f8:e4:6d:0c:2e:99:c3:7b:8e:75:dd:ba:
         d9:ee:19:f4:4e:ff:2c:7c:7e:c6:fb:c0:f8:0f:9c:98:b6:16:
         b7:e1:4b:c8:b3:65:a8:d5:6e:09:df:2f:23:42:2c:a8:34:4d:
         11:7c:ce:43:e6:c0:27:2c:27:44:05:bd:aa:1a:39:11:18:4c:
         62:3b:a8:f4:d1:43:1e:93:4d:9b:01:c5:94:7a:fc:cc:5c:7a:
         43:fe:3f:a5:e3:ee:9a:76:b4:c4:a5:28:3c:33:8b:62:08:69:
         80:80:07:61:be:a1:43:cf:46:50:8e:24:40:24:39:31:7c:f2:
         e2:2e:b4:bb:d2:33:a3:e5:a6:72:0e:b5:40:42:28:dd:4a:b6:
         ff:fd:a2:a5:b2:ff:a2:f1:77:ba:10:a1:df:77:b1:91:d8:d5:
         15:a1:5b:63:a2:80:27:66:a2:c7:79:59:9c:c5:4f:e1:37:d0:
         a9:cc:a2:8e:14:c9:6e:4c:66:52:12:03:7a:ef:fb:eb:eb:37:
         df:11:3b:bf:15:8a:75:73:ce:3b:1b:6c:aa:4b:8b:19:82:47:
         7b:76:58:28:9f:f8:de:20:43:b0:2a:24:d7:f2:20:c1:0f:ae:
         a4:d0:80:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 21 21:03:21 2024 by rpki-client on console-fra.rpki-client.org